CVE-2006-6450

None

CVSS

—

EPSS

21.7%

Published

Dec 10, 2006

CISA due date

—

The record

Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote attackers to execute arbitrary SQL commands via the (1) agentid and (2) pass parameters.

Affected packages

Ecosystem	Package	Introduced	Fixed